Security Forms
(State Internal Access Only)

• State Access or ID Card Request Form
• ADOA Datacenter Access Request
• ADOA Datacenter Equipment Pass
• ADOA ISD Survey Link
• ADOA Hardware Use Exception Request
• ADOA Photographic Release
• ADOA Proxy Exception Request
• Computer Use Forensics Investigation Request
• Host on Demand User Guide
• Mainframe Account Request
• Certification of Confidentiality Awareness Certificate
• Unauthorized Disclosure of Information Handout
• Security Incident Event Recap Report (ERR)

AIS Home

Security Policy, Standards and Procedures
(State Internal Access Only)

ADOA Information Security Policy

• A800 - Information Security Policy  - May 19, 2007

 ADOA Information Security Standards  

• A800-M1-S01 - Information Security Program - January 31, 2009
• A800-M2-S01 - Risk Assessment
• A800-M2-S02 - System of Record, Data Classification and System Categorization
• A800-M2-S03 - Vulnerability Scanning - May 9, 2007 
• A800-M3-S01 - Security Planning
• A800-M3-S02 - Acceptable Use of ADOA Information Resources - July 20, 2007
• A800-M3-S02-P01 - Proxy Exception Request Procedures
• A800-M3-S03 - Privacy Impact Assessment
• A800-M3-S06 - Email Policy - May 2, 2011
• A800-M4-S01 - Acquisition, Implementation and Disposal
• A800-M4-S02 - Software Copyright and License Compliance
• A800-M5-S01 - Security Assessments, Plans for Remedial Action and Continuous Monitoring
• A800-O1-S01 - Personnel Security
• A800-O2-S01 - Physical and Environmental Protection
• A800-O2-S03 - Physical Protection - Physical Access Control - February 15, 2008
• A800-O2-S04 - ADOA Data Center Physical Security - September 3, 2010
• A800-O3-S01 - Contingency Planning
• A800-O4-S01 - Configuration Change Control - November 9, 2009   
• A800-O5-S01 - System Maintenance
• A800-O6-S01 - Data and System Integrity
• A800-O7-S01 - Media Protection
• A800-O8-S01 - IT Security Awareness and Training
• A800-O9-S01 - Incident Management
• A800-T1-S01 - Identification and Authentication
• A800-T2-S01 - Access Control - January 31, 2009
• A800-T3-S01 - Audit and Accountability
• A800-T4-S01 - System and Communications Protection  
• A800-T4-S09 - Security of ADOA Publicly Accessable WEB Site Content - February 15, 2008 
• A800-T4-S10 - Structured Network Cabling - June 2, 2008 

ADOA Information Security Procedures

• A800-O2-S04-P2 - ADOA Disaster Recovery Data Center - Physical Access Control - January 31, 2009

All ADOA Information Security policies and standards conform to Statewide policies and standards.   Where ADOA does not have agency-specific policies and standards in place, we reference Statewide policies and standards.

 Online Forms

• New User Request
• Change/Terminate User Request
• Mainframe User Request
• Badge Access Request

AIS Home